Unscored severity · published Feb 21, 2011
CVE-2011-1049
Buffer overflow in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute…
–
CVSS
3.7%
EPSS
No
On KEV
Description
Buffer overflow in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted Macho-O file.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.7% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ID
Ida · Hex-rays
5.7; 6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-1049
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-1049
osvdb.org
http://osvdb.org/70846
Vendor Advisory
http://secunia.com/advisories/43190
Vendor Advisory
http://www.vupen.com/english/advisories/2011/0357
www.hex-rays.com
https://www.hex-rays.com/vulnfix.shtml
More from Ida
6.5
CVE-2026-45181
Hex-Rays IDA Pro 9.2 and 9.3 before 9.3sp2 does not block Clang dependency-file generation (via argument injection), which allows attackers to place their code into a plugins…
5.5
CVE-2022-32441
A memory corruption in Hex Rays Ida Pro v6.6 allows attackers to cause a Denial of Service (DoS) via a crafted file
–
CVE-2014-9458
Heap-based buffer overflow in the GDB debugger module in Hex-Rays IDA Pro before 6.6 cumulative fix 2014-12-24 allows remote GDB servers to have unspecified impact via unknown…
–
CVE-2011-1052
Integer overflow in the PSX/GEOS input file loaders in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to memory allocation
–
CVE-2011-1054
Unspecified vulnerability in the PEF input file loader in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors